Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Fedora 44 fido-device-onboard Important Denial of Service 2026-9e223ca14f

fedora
Calendar Grey April 25, 2026
Dist Fedora Esm H88
Update for fido-device-onboard addresses multiple critical issues and enhances security against potential attacks.
Automatic update for fido-device-onboard-0.5.5-8.fc44

Summary

A rust implementation of the FIDO Device Onboard Specification.

Update Information:

Automatic update for fido-device-onboard-0.5.5-8.fc44. Changelog for fido-device-onboard * Wed Apr 01 2026 Peter Robinson - 0.5.5-8 - Rebuild for CVE-2026-25727, CVE-2026-33056 * Sun Mar 15 2026 Benjamin A. Beasley - 0.5.5-7 - In Fedora, update nix dependency from 0.26 to 0.31

Change Log

* Wed Apr 1 2026 Peter Robinson - 0.5.5-8 - Rebuild for CVE-2026-25727, CVE-2026-33056 * Sun Mar 15 2026 Benjamin A. Beasley - 0.5.5-7 - In Fedora, update nix dependency from 0.26 to 0.31

References


[ 1 ] Bug #2438126 - CVE-2026-25727 fido-device-onboard: time affected by a stack exhaustion denial of service attack [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438126 [ 2 ] Bug #2449677 - CVE-2026-33056 fido-device-onboard: tar-rs: Arbitrary directory permission modification via crafted tar archive [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2449677

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9e223ca14f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: fido-device-onboard
Product: Fedora 44
Version: 0.5.5
Release: 8.fc44
Summary: A rust implementation of the FIDO Device Onboard Specification

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here